I have questions about DMA cheats

[LoneSurvivor88]

Originally Posted by vm-

Writing memory poses the same risk across both internal and dma cheats.

The difference comes on the detection side of things. Both DMA and internal cheats pose a risk of being detected which would result in a ban. For external / internal cheats the detection comes from the 'bypass' side of things and for DMA it comes from the firmware. The frequency of detections depends on several factors for both so there is no real argument as to which is "more undetected". (I know people might disagree with me here so just take it as my opinion)
In terms of features, both can result in bans but usually DMA has a lot less features or read only features which would definitely decrease this risk factor. Usually they are just ESP, Radar and potentially aimbot. If you have spent all the money to buy a DMA and run it on a 2nd pc and buy a cheat with risky or exploiting features then you are defeating the entire purpose of it which is to keep your account. And if this is what you are looking to do then an internal cheat would definitely serve the better purpose and give a more enjoyable experience overall.

Yeah to expand on that, for Externals (cheat software running outside of the game process -- DMA is external too btw) they will look at things that shouldn't be there on your system. Mapped drivers that are illegitimate, illegal PCIe devices (for DMA , but this is pretty trivial to bypass on BE/Tarkov), etc.

For Internals (cheat software that runs inside the game process) they will look for your injected modules inside the game process,etc. Someone who knows internals better than I do could probably expand here a bit.

Since DMA Software runs on a 2nd PC, as long as you have a good fw you should be tight.

Changing the contents of the memory by itself is NOT the most common way to get banned on Tarkov/BE. They have very few integrity checks on almost anything in the Tarkov game assembly (No recoil, chams, aimbot, you name it...)

[Moontic]

Originally Posted by vm-

Writing memory poses the same risk across both internal and dma cheats.

The difference comes on the detection side of things. Both DMA and internal cheats pose a risk of being detected which would result in a ban. For external / internal cheats the detection comes from the 'bypass' side of things and for DMA it comes from the firmware. The frequency of detections depends on several factors for both so there is no real argument as to which is "more undetected". (I know people might disagree with me here so just take it as my opinion)
In terms of features, both can result in bans but usually DMA has a lot less features or read only features which would definitely decrease this risk factor. Usually they are just ESP, Radar and potentially aimbot. If you have spent all the money to buy a DMA and run it on a 2nd pc and buy a cheat with risky or exploiting features then you are defeating the entire purpose of it which is to keep your account. And if this is what you are looking to do then an internal cheat would definitely serve the better purpose and give a more enjoyable experience overall.

Thanks for the detailed explanation.

I understand that even for the same memory write function, DMA is safer because it doesn't go through the CPU. I know that BE, EAC, and anti-cheat usually work by checking the communication between CPU and memory to detect cheats. In the process, DMA can leave less footprints and is safer because it doesn't go through the CPU.

I think features like ESP Chams(using fuser) are safe as long as no FW is detected, but I'm worried that aim-bots that don't use kmbox will get banned even if no FW is detected. I'm more cautious about using memory-writing features like aim-bot because I'm thinking of using an fuser.

However, from what lone wrote and other posts, it seems that memory writes (with DMA) are obviously dangerous in other games, but safe in tarkov. I think it could be a useless worry.

[vm-]

Originally Posted by Moontic

Thanks for the detailed explanation.

I understand that even for the same memory write function, DMA is safer because it doesn't go through the CPU. I know that BE, EAC, and anti-cheat usually work by checking the communication between CPU and memory to detect cheats. In the process, DMA can leave less footprints and is safer because it doesn't go through the CPU.

I think features like ESP Chams(using fuser) are safe as long as no FW is detected, but I'm worried that aim-bots that don't use kmbox will get banned even if no FW is detected. I'm more cautious about using memory-writing features like aim-bot because I'm thinking of using an fuser.

However, from what lone wrote and other posts, it seems that memory writes (with DMA) are obviously dangerous in other games, but safe in tarkov. I think it could be a useless worry.

When it comes to memory writes it depends on the scenario and anticheat.

Battleye doesn't have any advanced techniques to detect when memory has been written to or where it has been written from. So it doesn't really matter in terms of DMA or internal when it comes to memory writes on battleye. This is not to be mistaken with integrity checks which they do have and which would be easily identified on both DMA and internal cheats.

For the aimbot, it depends on the cheat and what they are doing. But for EFT , it doesn't have any checks for writing to the view angles / rotation. They do clamp their values to ensure it doesn't exceed the minimum / maximum values so they could have a server side check but all cheats should be handling this.

All in all, I wouldn't worry about enabling aimbot but if you do want to play it safe and are trying to last a long time then definitely avoid it because regardless of the memory writing, it usually is more obvious.